X-1281 US 



PATENT 



USING REDUNDANT ROUTING TO REDUCE SUSCEPTIBILITY TO SINGLE 

EVENT UPSETS IN PLD DESIGNS 

FIELD OF THE INVENTION 

[0001] The invention relates to programmable logic devices 
(PLDs) subject to single event upsets (SEUs) . More 
particularly, the invention relates to methods of using 
redundant routing resources to minimize the susceptibility to 
SEUs of a design implemented in a PLD. 

BACKGROUND OF THE INVENTION 

[0002] Programmable logic devices (PLDs) are a well-known 
type of digital integrated circuit that can be programmed to 
perform specified logic functions. For example, one type of 
PLD, the field programmable gate array (FPGA) , typically 
includes an array of configurable logic blocks (CLBs) 
surrounded by a ring of programmable input /output blocks 
(IOBs) . Some FPGAs also include additional logic blocks with 
special purposes (e.g., DLLs, RAMs, processors, and so 
forth) . 

[0003] FPGA logic blocks typically include programmable 
logic elements such as lookup tables (LUTs) , memory elements, 
multiplexers, and so forth. The LUTs are typically 
implemented as RAM arrays in which values are stored during 
"configuration" (i.e., programming) of the FPGA. The flip- 
flops, multiplexers, and other components are also programmed 
by writing configuration data to configuration memory cells 
included in the logic block. For example, the configuration 
data bits can enable or disable elements, alter the aspect 
ratios of memory arrays, select latch or flip-flop 
functionality for a memory element, and so forth. The 
configuration data bits can also interconnect the logic 
elements in various ways within a logic block by programming 
select values for multiplexers inserted in the interconnect 
paths within the logic block. 
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[0004] The various logic blocks are interconnected by a 
programmable interconnect structure that includes a large 
number of programmable interconnect lines (e.g., metal 
traces) . The interconnect lines and logic blocks are 
interconnected using programmable interconnect points (PIPs) . 
For example, a PIP can be implemented as a simple CMOS 
passgate. When the passgate is turned on, the two 
interconnect lines on either side of the passgate are 
electrically connected. When the passgate is turned off, the 
two interconnect lines are isolated from each other. Thus, 
by controlling the values on the gate terminals of the 
passgates, circuit connections can be easily made and 
altered. The value controlling each passgate is also stored 
in a configuration memory cell. 

[0005] Fig. 1 shows an exemplary implementation of a 
routing path between a source logic block (LB) 101 and a 
destination logic block 102. In the PLD of Fig. 1, each 
interconnect line (103-107) is driven by an associated 
programmable routing multiplexer (113-117, respectively) . In 
some PLDs, interconnect line 103 is driven by a driver or 
multiplexer included in source logic block 101, i.e., 
multiplexer 113 is omitted. The path between the source 101 
and destination 102 logic blocks traverses multiplexer 113, 
interconnect line 103, multiplexer 114, interconnect line 
104, multiplexer 115, interconnect line 105, multiplexer 116, 
interconnect line 106, multiplexer 117, and interconnect line 
107. 

[0006] Fig. 2 shows one possible implementation of routing 
multiplexer 116 of Fig. 1, in which routing multiplexer 116 
includes a 4-input multiplexer 201 controlled by two 
configuration memory cells MCI and MC0. The values stored in 
configuration memory cells MCI and MC0 select one of the 
input signals IN0-IN3 to be passed to the output node OUT. 
(In the present specification, the same reference characters 
are used to refer to terminals, interconnect lines, nodes, 
and their corresponding signals.) In the pictured example, 
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input terminal INI of multiplexer 201 is coupled to 
interconnect line 105 of Fig. 1. The other input terminals 
INO, IN2, IN3 are coupled to other interconnect lines (not 
shown) . Configuration memory cells MCI and MCO store low and 
high values, respectively, selecting the signal on 
interconnect line 105 to be passed to the output node OUT 
through input terminal INI. The output node OUT is coupled 
to interconnect line 106 of Fig. 1. 

[0007] Routing multiplexers typically include more than 
four input signals, but four input signals are shown in Fig. 
2, for clarity. The number of configuration memory cells 
controlling the multiplexer depends at least in part on the 
number of input signals to the multiplexer. 

[0008] In FPGAs, configuration memory cells are typically 
implemented as static RAM (random access memory) cells. Each 
FPGA typically contains many thousands or even millions of 
these static RAM configuration memory cells. 
[0009] When bombarded by high-energy particles, a static 
RAM cell can change state. For example, a stored high value 
can be inadvertently changed to a low value, and vice versa. 
These inadvertent and undesired state changes are known as 
"single event upsets", or SEUs . Sometimes an SEU has no 
effect on the functionality of the design. At other times, 
an SEU can change the function of an FPGA such that the 
circuit implemented in the FPGA no longer functions properly. 
[0010] For example, if a static RAM cell controlling a 
passgate changes state, but the two interconnect lines on 
either side of the passgate are not used in the design, this 
change of state has no effect on the function of the circuit. 
Similarly, a change of state in a memory cell in an unused 
LUT has no effect. However, when SEUs occur in portions of 
the FPGA that are in use, the SEUs can result in loss of 
function for the design implemented in the FPGA. 
[0011] In some applications, such as space-based 
applications in a low-earth orbit, it is important to 
minimize the effects of SEUs in PLD-based (e.g., FPGA-based) 
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designs. SEUs can also be a concern in some earth-based 
systems, e.g., systems in high altitude locations. One 
method of mitigating and minimizing these effects is "triple 
modular redundancy", or TMR, in which three copies of a 
circuit are included in a design. Any two copies of the 
circuit can override output from the third copy, if it 
generates data different from the other copies. While useful 
in many applications, implementing a circuit using TMR 
requires about three times as many programmable resources as 
a standard implementation. 

[0012] Therefore, it is desirable to provide methods other 
than TMR that will reduce the susceptibility to SEUs of a PLD 
design. 

SUMMARY OF THE INVENTION 

[0013] The invention provides methods of implementing 
designs in programmable logic devices (PLDs) to reduce 
susceptibility to single-event upsets (SEUs) . The methods of 
the invention take advantage of the fact that most PLD 
designs leave many routing resources unused. The unused 
routing resources can be used to provide duplicate paths 
between source and destination of signal paths in the design. 
The duplicate paths are selected such that an SEU in a 
routing multiplexer included in each path simply switches the 
signal between the two paths. Thus, if one path is disabled 
due to an SEU, the other path can still provide the necessary 
connection, and the functionality of the design is 
unaffected. The methods of the invention can be applied, for 
example, to routing software for field programmable gate 
arrays (FPGAs) having programmable routing multiplexers 
controlled by static RAM-based configuration memory cells. 
[0014] In some embodiments, the duplicate paths are 
provided during the routing phase of the place-and-route 
implementation of the PLD design. In other embodiments, a 
post-processing step performed on a previously placed and 
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routed PLD design adds additional paths to reduce the 
susceptibility of the design to SEUs . 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0015] The present invention is illustrated by way of 
example, and not by way of limitation, in the following 
figures . 

[0016] Fig. 1 shows an exemplary routing path between a 
source logic block and a destination logic block in a PLD 
generated using known methods. 

[0017] Fig. 2 shows a 4-input routing multiplexer that can 
be used, for example, in the routing path of Fig. 1. 
[0018] Fig. 3 shows exemplary routing paths implemented in 
a PLD according to an embodiment of the present invention. 
[0019] Fig. 4 shows one implementation of a 4-input 
multiplexer that can be used, for example, in the routing 
paths of Fig. 3. 

[0020] Fig. 5 shows one implementation of a 4-input 
multiplexer that can be used, for example, in the routing 
paths of Fig. 6. 

[0021] Fig. 6 shows exemplary routing paths implemented in 
a PLD according to another embodiment of the present 
invention. 

[0022] Fig. 7 shows the steps of a first method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to an embodiment of the invention. 
[0023] Fig. 8 shows the steps of a second method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to another embodiment of the invention. 
[0024] Fig. 9 shows the steps of- a third method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to another embodiment of the invention. 
[0025] Fig. 10 shows the steps of a fourth method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to another embodiment of the invention. 
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[0026] Fig. 11 shows the steps of a fifth method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to another embodiment of the invention. 
[0027] Fig. 12 shows the steps of a sixth method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs, according to another embodiment of the invention. 

DETAILED DESCRIPTION OF THE DRAWINGS 

[0028] The present invention is believed to be applicable 
to a variety of programmable logic devices (PLDs) . The 
methods of the invention have been found to be particularly 
applicable and beneficial for designs implemented using field 
programmable gate arrays (FPGAs) controlled by static RAM- 
based configuration memory cells. However, the methods of 
the invention are not so limited, and can be applied to any 
PLD subject to single event upsets. 

[0029] The implementation of a design in a PLD typically 
includes two phases. In the "placement" phase, the design is 
divided into sub-circuits, where each sub-circuit is sized to 
fit into one of the available programmable logic blocks (or 
into a portion of one of the available blocks) . This step is 
known as "mapping" . Each sub-circuit is then assigned to one 
of the programmable logic blocks in the PLD. The result of 
this process is a PLD placement that includes the logic in 
the design but does not include the interconnections between 
logic in different logic blocks. In the "routing" phase, the 
nodes (nets) interconnecting the various logic blocks are 
added to the design. Once the design has been fully 
implemented, e.g., placed and routed in the PLD, a 
configuration data file is generated from the placed and 
routed design. The configuration data file will implement 
the design when loaded into the PLD. 

[0030] According to one aspect of the present invention, 
the routing software for the PLD can be designed to implement 
more than one routing path for one or more of the nodes in 
the design. The duplicate paths are selected such that an 
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SEU in a routing multiplexer included in each path simply 
switches the signal between the two paths. Thus, if one path 
is disabled due to an SEU, the other path can still provide 
the necessary connection, and the functionality of the design 
is unaffected. 

[0031] According to another aspect of the invention, a 
post-processing step can be added after the routing phase of 
the PLD implementation process. Thus, standard placement and 
routing software can be used to generate a placed and routed 
design, and the post-processing software can add additional 
routing paths selected such that an SEU in a routing 
multiplexer on the path simply switches the signal between 
the two paths . 

[0032] Fig. 3 shows an exemplary implementation of two 
routing paths between a source logic block (LB) 301 and a 
destination logic block 3 02, implemented according to one 
embodiment of the invention. In the PLD of Fig. 3, each 
interconnect line (303-307) is driven by an associated 
programmable routing multiplexer (313-317, respectively) . In 
some PLDs, interconnect line 3 03 is driven by a driver or 
multiplexer included in source logic block 301, i.e., 
multiplexer 313 is omitted. 

[0033] A first routing path between the source 3 01 and 
destination 3 02 logic blocks traverses multiplexer 313, 
interconnect line 303, multiplexer 314, interconnect line 
304, multiplexer 315, interconnect line 305, multiplexer 316, 
interconnect line 306, multiplexer 317, and interconnect line 

307. A second routing path between the source 301 and 
destination 302 logic blocks traverses multiplexer 313, 
interconnect line 303, multiplexer 318, interconnect line 

308, multiplexer 316, interconnect line 306, multiplexer 317, 
and interconnect line 307. 

[0034] The two routing paths between the source and 
destination logic blocks are not randomly selected, nor are 
they selected simply to minimize the distance traveled or the 
delay on the node. Instead, the routing paths are selected 
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in a fashion designed to reduce the susceptibility of the 
design to SEUs . However, given this constraint, due 
consideration can also be given to other factors such as 
distance and delay, if desired. For example, in an FPGA 
there are often many different equivalent routes, i.e., 
interconnect lines having the same length and the same delay. 
For example, routing software can be programmed to 
preferentially use similar types of interconnect lines when 
implementing redundant routing, such that predefined timing 
constraints are still met. As another option, the software 
can be designed to omit redundant routing whenever the 
addition of the redundant routing prevents meeting the 
imposed timing constraints. 

[0035] Fig. 4 illustrates an exemplary way in which a 
design can be made less susceptible to SEUs. Fig. 4 shows 
one possible implementation of multiplexer 316 of Fig. 3, in 
which routing multiplexer 316 includes a 4-input multiplexer 
401 controlled by two configuration memory cells MCI and MCO. 
The values stored in configuration memory cells MCI and MCO 
select one of the input signals IN0-IN3 to drive the output 
node OUT, which is coupled in this example to interconnect 
line 306 of Fig. 3. In the pictured example, input terminal 
INI of multiplexer 401 is coupled to interconnect line 305, 
and input terminal IN0 is coupled to interconnect line 308. 
Configuration memory cells MCI and MCO store low and high 
values, respectively, selecting interconnect line 3 05 to 
drive output signal OUT. 

[0036] Note that if an SEU were to affect memory cell MCO, 
the values stored in memory cells MCI and MCO would both be 
low. In that event, multiplexer 401 would select 
interconnect line 308 from input terminal IN0 to drive 
interconnect line 306. However, the same signal (from 
interconnect line 303) is supplied to each of interconnect 
lines 305 and 308. Thus, this SEU would not cause any change 
to the logical functionality of the circuit, although the 
signal delay might or might not change. 
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[0037] Routing multiplexers typically include more than 
four input signals, but four input signals are shown in Fig. 
4, for clarity. The number of configuration memory cells in 
the routing multiplexer depends at least in part on the 
number of input signals to the multiplexer. 
[0038] The multiplexer configuration shown in Fig. 4 is 
immune to the effects of an SEU occurring in memory cell MCO. 
However, an SEU occurring in memory cell MCI would cause the 
IN3 input terminal of multiplexer 401 to be selected (the 
values stored in memory cells MCI and MCO would both be 
high) . Therefore, the multiplexer configuration shown in 
Fig. 4, while less susceptible than multiplexer 116 of Fig. 
2, is still susceptible to SEUs . 

[0039] Fig. 5 addresses this issue by providing a 
multiplexer configuration immune to SEUs in either memory 
cell. In the multiplexer configuration of Fig. 5, routing 
multiplexer 516 includes a 4-input multiplexer 501 controlled 
by two configuration memory cells MCI and MCO. The values 
stored in configuration memory cells MCI and MCO select one 
of the input signals IN0-IN3 to drive the output node OUT, 
which is coupled in this example to interconnect line 3 06 
(see Fig. 6) . In the pictured example, input terminal INI of 
multiplexer 501 is coupled to interconnect line 3 05, input 
terminal IN0 is coupled to interconnect line 308, and input 
terminal IN3 is coupled to interconnect line 509 (see Fig. 
6) . Configuration memory cells MCI and MCO store low and 
high values, respectively, selecting interconnect line 3 05 to 
drive output signal OUT. 

[0040] Fig. 6 shows exemplary routing paths in which the 
multiplexer configuration of Fig. 5 can be applied with the 
desired result. The routing paths shown in Fig. 6 are 
similar to those shown in Fig. 3, but with the addition of 
routing multiplexer 619 and interconnect line 509. Routing 
multiplexer 516 can be implemented, for example, as shown in 
Fig. 5. 
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[0041] Returning to Fig. 5, as in the multiplexer 
configuration shown in Fig.' 4, if an SEU were to affect 
memory cell MCO, the values stored in memory cells MCI and 
MCO would both be low. In that event, multiplexer 501 would 
be selecting interconnect line 308 to drive interconnect line 
306. However, the same signal (from interconnect line 303) 
is supplied to each of interconnect lines 305 and 3 08. Thus, 
this SEU would not affect the logical functionality of the 
circuit, although the signal delay might or might not change. 
[0042] Unlike the multiplexer configuration shown in Fig. 
4, an SEU affecting memory cell MCI is also addressed in 
Figs. 5 and 6. If an SEU were to affect memory cell MCI, the 
values stored in memory cells MCI and MCO would both be high. 
In that event, multiplexer 501 would select interconnect line 
509 to drive interconnect line 306. Therefore, if the same 
signal is supplied to each of interconnect lines 305, 3 08, 
and 509, this SEU also would not affect the logical 
functionality of the circuit. 

[0043] Many other implementations are also possible for 
routing multiplexer 516. For example, when routing 
multiplexer 516 is a 4-input multiplexer controlled by two 
memory cells as shown in Fig. 5, the possible choices for the 
input terminals to be coupled together are as shown in Table 
1. The first column in Table 1 shows the values initially 
selected for memory cells MCI, MCO. The second column shows 
which input terminal is selected by the initial values. The 
third column shows the input terminal that would be selected 
in the event of an SEU affecting memory cell MCI. The fourth 
column shows the input terminal that would be selected in the 
event of an SEU affecting memory cell MCO. 
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TABLE 1 

MCI, MCO Selected inx SEU in MCI SEU in MCQ 

0 , 0 INO IN2 INI 

0,1 INI IN3 INO 

1.0 IN2 INO IN3 

1.1 IN3 INI IN2 

[0044] As can be seen from Table 1, when input terminal 



INO is initially selected, the effects of SEUs in the two 
memory cells can be cut in half by providing the INO input 
signal to either of input terminals IN2 and INI, or removed 
altogether by providing the INO input signal to both IN2 and 
INI. Similarly, when input terminal INl is initially 
selected, the effects of SEUs in the two memory cells can be 
cut in half by providing the INl input signal to either of 
input terminals IN3 and INO, or removed altogether by 
providing the INl input signal to both IN3 and INO. When 
input terminal IN2 is initially selected, the effects of SEUs 
in the two memory cells can be cut in half by providing the 
IN2 input signal to either of input terminals INO and IN3 , or 
removed altogether by providing the IN2 input signal to both 
INO and IN3 . When input terminal IN3 is initially selected, 
the effects of SEUs in the two memory cells can be cut in 
half by providing the IN3 input signal to either of input 
terminals INl and IN2 , or removed altogether by providing the 
' IN3 input signal to both INl and IN2 . 
[0045] The methods of the invention can also be applied to 
routing multiplexers having fewer than four input terminals, 
or more than four input terminals. For example, when the 
routing multiplexer is a 2 -input multiplexer controlled by a 
single memory cell, routing a node to both input terminals of 
the multiplexer protects against SEUs regardless of which 
input terminal is initially selected. 

[0046] Table 2 shows the possible choices for the input 
terminals when an exemplary 8 -input routing multiplexer 
controlled by 3 memory cells is used. The first column in 
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Table 2 shows the values initially selected for memory cells 
MC2, MCI, MCO. The second column shows which input terminal 
is selected by the initial values. The third column shows 
the input terminal that would be selected in the event of an 
SEU affecting memory cell MC2 . The fourth column shows the 
input terminal that would be selected in the event of an SEU 
affecting memory cell MCI. The fifth column shows the input 
terminal that would be selected in the event of an SEU 
affecting memory cell MCO. 



TABLE 2 



MC2,MC1,MC0 


Selected InX 


SEU in MC2 


SEU in MCI 


SEU in MCO 


0,0,0 


IN0 


IN4 


IN2 


INI 


0,0,1 


INI 


IN5 


IN3 


IN0 


0,1,0 


IN2 


IN6 


IN0 


IN3 


0,1,1 


IN3 


IN7 


INI 


IN2 


1,0,0 


IN4 


IN0 


IN6 


IN5 


1,0,1 


IN5 


INI 


IN7 


IN4 


1,1,0 


IN6 


IN2 


IN4 


IN7 


1,1,1 


IN7 


IN3 


IN5 


IN6 



[0047] Tables 1 and 2 can easily be adapted by those of 
skill in the art to provide tables for multiplexers having 
different numbers of input terminals, and for multiplexers 
using different decoding schemes. The methods of the 
invention can be applied to any multiplexer where two input 
.terminals can be identified such that a selection is made 
between the two data input terminals based on the status of a 
single memory cell. Based on the disclosure herein, it would 
be clear to those of skill in the art how to make such an 
identification, and how to route a node to each of the data 
input terminals of the multiplexer. Therefore, the invention 
is not limited by the exemplary multiplexers described 
herein. 

[0048] Fig. 7 shows the steps of a first method of 
implementing a design in a PLD to reduce susceptibility to 
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SEUs. This method can be enabled, for example, by altering 
existing PLD routing software to add the required new 
capabilities. The design includes source logic, destination 
logic, and a node coupled between the source logic and the 
destination logic. 

[0049] In step 701, the source logic is assigned to a 
first logic block in the PLD, and in step 702, the 
destination logic is assigned to a second logic block in the 
PLD. Steps 701 and 702 can be performed, for example, by a 
single placement module 710. Placement module 701 can be, 
for example, similar to placement software now in common use 
for the placement of PLD designs. Steps 701 and 702 can be 
performed sequentially (in any order) or concurrently. In 
some embodiments, steps 701 and 702 are performed in an 
interactive fashion, i.e., with the placements of the two 
blocks being optimized one with the other. Such placement 
processes are well known to those of skill in the art. 
[0050] In step 703, two related data input terminals are 
identified for a programmable routing multiplexer in the PLD. 
The two data input terminals are related in such a fashion 
that a selection between the two data input terminals is 
determined by a value stored in a memory cell controlling the 
programmable routing multiplexer. Therefore, if the first 
input terminal is selected, and the value stored in the 
memory cell is changed by an SEU, the second input terminal 
is then selected. Similarly, if the second input terminal is 
selected, and the value stored in the memory cell is changed 
by an SEU, the first input terminal is then selected. 
[0051] In step 7 04, the node from the design is routed 
between the first and second logic blocks (i.e., between the 
source logic and the destination logic) . The resulting 
routing path traverses the programmable routing multiplexer 
via the first data input terminal. In step 705, the node is 
again routed on a second routing path between the first and 
second logic blocks . The second routing path traverses the 
programmable routing multiplexer via the second data input 
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terminal. The first and second routing paths can share some 
interconnect lines in the path, as shown in Figs. 3 and 6, or 
can be independent of one another. 

[0052] Steps 704 and 705 can be performed sequentially (in 
any order) or concurrently. In some embodiments, steps 704 
and 705 are performed concurrently and in an interactive 
fashion, i.e., with the two routing paths being optimized one 
with the other. Such routing processes are well known to 
those of skill in the art. 

[0053] In optional steps 706 and 707, a third data input 
terminal of the routing multiplexer is identified that is 
also related to the first data input terminal (step 706) . 
The third input terminal is related to the first input . 
terminal in such a fashion that a selection between the two 
data input terminals is determined by a value stored in a 
second memory cell controlling the programmable routing 
multiplexer. The node is then routed a third time, this time 
traversing the programmable routing multiplexer via the third 
data input terminal (step 707) . 

[0054] Steps 703-705 or 703-707 can be performed, for 
example, by a single routing module 711. The illustrated 
routing module 711 can be readily adapted from current 
routing software to perform the illustrative steps shown in 
Fig. 7. 

[0055] In some embodiments, the PLD is a field 
programmable gate array (FPGA) , and in some of these 
embodiments the memory cells are static RAM-based 
configuration memory cells of the FPGA. However, the methods 
of the invention (e.g., the methods illustrated in Figs. 7-9) 
can be applied to any PLD that includes memory cells subject 
to single event upsets resulting from any cause. 
[0056] Fig. 8 shows the steps of a second method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs . This method can be enabled, for example, by providing 
a post-processing module in addition to existing PLD 
software. The post-processing module modifies a previously 
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placed and routed design to add the additional path or paths 
of the invention. The design includes source logic, 
destination logic, and a node coupled between the source 
logic and the destination logic. 

[0057] In step 801, a PLD placement of the design is 
generated, with the source logic assigned to a first logic 
block and the destination logic assigned to a second logic 
block. This step can be performed by a placement module 810. 
Placement module 810 can be, for example, placement software 
such as is already well known and readily available. 
[0058] In step 802, the PLD placement is routed to 
generate a routed design. In the routed design, the PLD node 
is routed on a first routing path that traverses a 
programmable routing multiplexer via a first data input 
terminal. Step 802 can be performed by a routing module 811. 
Routing module 811 can be, for example, routing software such 
as is already well known and readily available. 
[0059] In step 803, a second data input terminal of the 
routing multiplexer is identified that is related to the 
first data input terminal. The two data input terminals are 
related in such a fashion that a selection between the two 
data input terminals is determined by a value stored in a 
memory cell controlling the programmable routing multiplexer. 
Therefore, if the first input terminal is selected, and the 
value stored in the memory cell is changed by an SEU, the 
second input terminal is then selected. Similarly, if the 
second input terminal is selected, and the value stored in 
the memory cell is changed by an SEU, the first input 
terminal is then selected. 

[0060] In step 804, the PLD node is routed on a second 
routing path between the first and second logic blocks. The 
second routing path traverses the programmable routing 
multiplexer via the second data input terminal. 
[0061] Note that in some embodiments, and depending on the 
number and type of PLD interconnect resources left unused by 
the design, it might not be possible to route many (or any) 
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of the nodes using a second routing path. In some 
embodiments, the routing software performing step 804 is 
enabled to alter the routing previously implemented in step 
802 to permit the addition of a second routing path. In some 
embodiments, if the routing software is unable to add a 
second path, the software simply moves on and makes the 
attempt on another node. In some embodiments, the software 
generates a report of nodes to which a second path could not 
be added, or a report of nodes to which a second path was 
successfully added. 

[0062] In optional steps 805 and 806, a third data input 
terminal of the routing multiplexer is identified that is 
also related to the first data input terminal (step 805) . 
The third input terminal is related to the first input 
terminal in such a fashion that a selection between the two 
data input terminals is determined by a value stored in a 
second memory cell controlling the programmable routing 
multiplexer. The node is then routed a third time, this time 
traversing the programmable routing multiplexer via the third 
data input terminal (step 806) . 

[0063] Steps 803-804 or 803-806 can be performed, for 
example, by a single post-processing module 812. 
[0064] Fig. 9 shows the steps of a third method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs. In step 901, first and second data input terminals 
are identified in a programmable routing multiplexer of the 
PLD. The two data input terminals are related in such a 
fashion that a selection between the two data input terminals 
is determined by a value stored in a memory cell controlling 
the programmable routing multiplexer. 

[0065] In step 902, a node in the PLD design is .routed to 
the first data input terminal. In step 903, the node is 
routed to the second data input terminal. Steps 902 and 903 
can be performed sequentially (in any order) or concurrently. 
In some embodiments, steps 902 and 903 are performed 
concurrently and in an interactive fashion, i.e., with the 
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two routing paths being optimized one with the other. Such 
routing processes are well known to those of skill in the 
art . 

[0066] Step 901 can be performed, for example, by an 
identification module. Steps 902 and 903 can be performed, 
for example, by a routing module. In some embodiments, the 
identification module is a subset of the routing module, or 
is under the control of the routing module. 

[0067] In optional steps 904 and 905, a third data input 
terminal of the routing multiplexer is identified that is 
also related to the first data input terminal (step 904) . 
The third input terminal is related to the first input 
terminal in such a fashion that a selection between the two 
data input terminals is determined by a value stored in a 
second memory cell controlling the programmable routing 
multiplexer. The node is then routed a third time, this time 
traversing the programmable routing multiplexer via the third 
data input terminal (step 905) . 

[0068] According to some embodiments of the invention, the 
reduced susceptibility measures described herein are applied 
only under certain circumstances, e.g., when the circuit 
being implemented is not already included in a triple modular 
redundancy (TMR) circuit. As previously described, one 
method of protecting against SEUs is to implement the circuit 
three times, and to allow any two of the modules to override 
the third module. Therefore, any module affected by an SEU 
is "outvoted" by the other two modules. When logic and/or 
circuit nodes are included in a TMR circuit, it is not 
usually considered necessary to apply other measures against 
SEUs. Therefore, for example, logic and/or nodes included in 
a circuit can be tested to determine if they form a portion 
of a TMR circuit, and the steps shown in Figs. 7-9 (for 
example) can be applied only in the absence of TMR. 
[0069] According to other embodiments of the invention, 
the reduced susceptibility measures described herein are 
applied only when the circuit being implemented is not 
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already covered by other fault tolerance schemes. For 
example, any circuit, node, or logic can be exempted from the 
reduced susceptibility measures of the present invention when 
the circuit, node, or logic forms a portion of any logic 
voting scheme, e.g., three out of five. Other known methods 
of increasing fault tolerance can also be detected, and the 
methods of the invention can be applied only when these other 
known methods have not been previously applied. 
[0070] Fig. 10 shows the steps of one such method of 
implementing a design in a PLD to reduce susceptibility to 
SEUs . Many of the steps shown in Fig. ,10 are similar to 
steps shown in Fig. 7. However, in added step 1001 the 
source and destination logic assigned in steps 701 and 7 02 
are evaluated to determine if they each form a portion of a 
TMR circuit. If so, standard routing processes are used to 
route the node between the source and destination logic (step 
1002). If not, the SEU mitigating steps 703-707 are 
performed. Note that step 1001 can be performed prior to 
either or both of steps 701 and 702, if desired. 
[0071] Fig. 11 shows the steps of another such method. 
Many of the steps shown in Fig. 11 are similar to steps shown 
in Fig. 8. However, in added step 1101 the node routed in 
step 802 is evaluated to determine if the node is included in 
a TMR circuit. If so, the routing process is complete (step 
1102). If not, the SEU mitigating steps 803-806 are 
performed. Note that step 1101 can be performed prior to 
either or both of steps 801 and 802, if desired. 
[0072] Fig. 12 shows the steps of another such method. 
Many of the steps shown in Fig. 12 are similar to steps shown 
in Fig. 9. However, in added step 1201 a node in the PLD 
design is evaluated to determine if the node is included in a 
TMR circuit. If so, standard routing processes are used to 
route the node (step 1202). If not, the SEU mitigating steps 
.901-905 are performed. 
[0073] The methods of the present invention can be 
performed in either hardware, software, or any combination 
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thereof, as those terms are currently known in the art. In 
particular, the present methods can be carried out by 
software, firmware, or microcode operating on a computer or 
computers of any type. Additionally, software embodying the 
present invention can comprise computer instructions in any 
form (e.g., source code, object code, interpreted code, etc.) 
stored in any computer-readable medium (e.g., ROM, RAM, 
magnetic media, punched tape or card, compact disc (CD) in 
any form, DVD, etc.). Further, such software can also be in 
the form of a computer data signal embodied in a carrier 
wave, such as that found within the well-known Web pages 
transferred among computers connected to the Internet. 
Accordingly, the present invention is not limited to any 
particular platform, unless specifically stated otherwise in 
the present disclosure. 

[0074] Those having skill in the relevant arts of the 
invention will now perceive various modifications and 
additions that can be made as a result of the disclosure 
herein. Accordingly, all such modifications and additions 
are deemed to be within the scope of the invention, which is 
to be limited only by the appended claims and their 
equivalents . 
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